CVE-2026-47493

7.8 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary: This vulnerability allows a guest system to access privileged host GPU resources, potentially leading to code execution and data tampering.
Exploitability: Exploitation requires guest system access and the ability to execute code within the vGPU environment. Precondition is the presence of the NVIDIA vGPU software on both Windows and Linux systems.
Blast radius: If exploited, the impact could include code execution, privilege escalation, data tampering, denial of service, and information disclosure across the affected systems.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the latest version of NVIDIA vGPU software as soon as possible.

rcepriv-escalationdata-tamperingdosinfo-disclosure

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-862

Public exploit & PoC references

https://github.com/NVIDIA/product-security/tree/main/2026/5861

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.